SOLVED

Help with App Permission Policies

%3CLINGO-SUB%20id%3D%22lingo-sub-1517691%22%20slang%3D%22en-US%22%3EHelp%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1517691%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20currently%20have%20our%20Global%20policy%20set%20to%20Allow%20all%20Microsoft%20Apps%2C%20block%20all%203rd%20party%20and%20custom%20apps.%26nbsp%3B%20Our%20assumption%20was%20that%20setting%20Allow%20all%20apps%20for%20Microsoft%20apps%2C%20%22%3CSPAN%3ETeams%20apps%20published%20by%20Microsoft%20or%20its%20partners%20can%20be%20installed%20by%20your%20users%3C%2FSPAN%3E%22%20means%20that%20when%20the%20Publisher%20is%20Microsoft%2C%20Microsoft%20Corp.%20or%20Microsoft%20Corporation%2C%20the%20app%20would%20be%20available%20to%20all%20users%20to%20consume.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20issue%20is%2C%20we've%20recently%20(2%20days%20ago)%20enabled%20the%20%22Incoming%20Webhook%22%2C%20and%20it's%20not%20available%20for%20users%20to%20use.%26nbsp%3B%20Other%20apps%20such%20as%20Bing%20News%2C%20Azure%20Boards%2C%20Power%20BI%2C%20and%20Wikipedia%20Search%20are%20available.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%20why%20it%20wouldn't%20be%20showing%20up%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%3C%2FP%3E%3CP%3E%26nbsp%3BRob%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1517691%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1517977%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1517977%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F726427%22%20target%3D%22_blank%22%3E%40RobD365%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20when%20users%20go%20to%20Apps%20within%20Teams%2C%20and%20search%20for%20Incoming%20Webhook%2C%20do%20they%20not%20see%20the%20option%20as%20below%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-07-13%20at%2006.46.44.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204967i677C44FA63081FF8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Screenshot%202020-07-13%20at%2006.46.44.png%22%20alt%3D%22Screenshot%202020-07-13%20at%2006.46.44.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1518002%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1518002%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThat's%20correct%2C%20just%20having%20it%20allowed%2C%20and%20all%20%22Microsoft%20apps%22%2C%20and%20the%20app%20isn't%20available.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20since%20added%20it%20as%20an%20allowed%203rd%20party%20app%2C%20however%20that's%20not%20what%20i%20was%20expecting%20to%20have%20to%20do.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%3C%2FP%3E%3CP%3E%26nbsp%3BRob%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1518022%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1518022%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F726427%22%20target%3D%22_blank%22%3E%40RobD365%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThat's%20odd.%20If%20you%20have%20the%20App%20setup%20as%20below%20in%20Managed%20Apps..%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-07-13%20at%2007.04.49.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204969i10DF449024ADD483%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Screenshot%202020-07-13%20at%2007.04.49.png%22%20alt%3D%22Screenshot%202020-07-13%20at%2007.04.49.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20your%20Microsoft%20apps%20are%20set%20as%20below%20in%20your%20Global%20Permission%20policy..%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Screenshot%202020-07-13%20at%2007.05.06.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204970iBFFEBB8113D313B6%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Screenshot%202020-07-13%20at%2007.05.06.png%22%20alt%3D%22Screenshot%202020-07-13%20at%2007.05.06.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThen%20you%20should't%20have%20any%20problems.%26nbsp%3B%20Maybe%20try%20creating%20a%20separate%20permission%20policy%20and%20assign%20a%20test%20user%20to%20it%2C%20and%20see%20if%20that%20sorts%20it.%26nbsp%3B%20If%20not%2C%20then%20I%20would%20suggest%20opening%20a%20ticket%20with%20Microsoft.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1518099%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1518099%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'd%20allowed%20the%20%22Incoming%20webhook%22%20app%2C%20and%20o%3CSPAN%3Eur%20Global%20policy%26nbsp%3B%3C%2FSPAN%3E%3CEM%3Ewas%3C%2FEM%3E%20as%20it%20is%20below%20(this%20is%20also%20how%20my%20own%20Tenant%20is%20configured%2C%20and%20it's%20working%20as%20expected)%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22RobD365_0-1594622642870.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204973iCE9485ED9E93AECD%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22RobD365_0-1594622642870.png%22%20alt%3D%22RobD365_0-1594622642870.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20make%20the%20webhooks%20app%20available%2C%20i%20had%20to%20set%20it%20to%20this%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22RobD365_1-1594622721197.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F204974i3BFFA4E8ED735280%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22RobD365_1-1594622721197.png%22%20alt%3D%22RobD365_1-1594622721197.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20user%20who%20requested%20it%20mentioned%20he%20had%20to%20quit%20the%20Teams%20app%20before%20webhooks%20was%20visible%2C%20which%20reminded%20me%20of%20a%20similar%20problem%20when%20we%20were%20testing%20an%20actual%203rd%20party%20app%2C%20we%20had%20to%20quit%20Teams%20to%20make%20it%20show%20up.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20a%20couple%20more%20Microsoft%20published%20apps%20that%20I'll%20be%20allowing%20in%20the%20next%20couple%20days%2C%20and%20have%20lined%20up%20some%20end%20users%20to%20test%20for%20me.%20Hopefully%20its%20as%20easy%20as%20waiting%20the%2024%20hours%2C%20and%20quitting%20teams%20to%20clear%20out%20any%20cached%20settings%20client%20side.%26nbsp%3B%20I'll%20also%20set%20up%20a%20test%20permission%20policy%20and%20add%20some%20of%20our%20test%20users%20into%20it%20as%20an%20extra%20check.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%3C%2FP%3E%3CP%3E%26nbsp%3BR%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1518242%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1518242%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F726427%22%20target%3D%22_blank%22%3E%40RobD365%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAh%20yes%2C%20it%20can%20just%20be%20a%20case%20of%20waiting.%26nbsp%3B%20Things%20don't%20always%20happen%20quickly%20in%20Teams.%26nbsp%3B%20You%20definitely%20should%20not%20have%20had%20to%20enable%20it%20as%20a%20third-party%20app%20though.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1520051%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1520051%22%20slang%3D%22en-US%22%3EInteresting%2C%20I've%20enabled%20a%20couple%20other%20Microsoft%20apps%2C%20one%20of%20my%20accounts%2C%20which%20has%20%22Third%20party%20apps%22%20set%20to%20allow%20all%20can%20see%20these%20newly%20enabled%20apps%20straight%20away%2C%20my%20normal%20account%20(and%20a%20random%20selection%20of%20users)%20can't%20...%20i'll%20give%20it%2024%20hours%20and%20then%20see%20what%20Microsoft%20think.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1585938%22%20slang%3D%22en-US%22%3ERe%3A%20Help%20with%20App%20Permission%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1585938%22%20slang%3D%22en-US%22%3EJust%20an%20update%20...%20its%20been%20a%20month%2C%20and%20we%20are%20still%20waiting%20on%20Microsoft%20to%20work%20out%20why%20the%20apps%20aren't%20available%2C%20thankfully%20it's%20not%20a%20high%20priority%20for%20us%2C%20but%20it%20may%20become%20one%20when%20the%20Lists%20app%20is%20released%2C%20it%20doesn't%20activate%20%3A%5C%3C%2Fimg%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi All,

 

We currently have our Global policy set to Allow all Microsoft Apps, block all 3rd party and custom apps.  Our assumption was that setting Allow all apps for Microsoft apps, "Teams apps published by Microsoft or its partners can be installed by your users" means that when the Publisher is Microsoft, Microsoft Corp. or Microsoft Corporation, the app would be available to all users to consume.

 

The issue is, we've recently (2 days ago) enabled the "Incoming Webhook", and it's not available for users to use.  Other apps such as Bing News, Azure Boards, Power BI, and Wikipedia Search are available.

 

Any ideas why it wouldn't be showing up?

 

Cheers

 Rob

7 Replies
Highlighted

@RobD365 

 

So when users go to Apps within Teams, and search for Incoming Webhook, do they not see the option as below?

 

Screenshot 2020-07-13 at 06.46.44.png

Highlighted

Hi @PeterRising 

 

That's correct, just having it allowed, and all "Microsoft apps", and the app isn't available.

 

I've since added it as an allowed 3rd party app, however that's not what i was expecting to have to do.

 

Cheers

 Rob

Highlighted
Solution

@RobD365 

 

That's odd. If you have the App setup as below in Managed Apps..

 

Screenshot 2020-07-13 at 07.04.49.png

 

And your Microsoft apps are set as below in your Global Permission policy..

 

Screenshot 2020-07-13 at 07.05.06.png

 

Then you should't have any problems.  Maybe try creating a separate permission policy and assign a test user to it, and see if that sorts it.  If not, then I would suggest opening a ticket with Microsoft.

Highlighted

@PeterRising 

 

I'd allowed the "Incoming webhook" app, and our Global policy was as it is below (this is also how my own Tenant is configured, and it's working as expected)

RobD365_0-1594622642870.png

 

To make the webhooks app available, i had to set it to this

RobD365_1-1594622721197.png

 

The user who requested it mentioned he had to quit the Teams app before webhooks was visible, which reminded me of a similar problem when we were testing an actual 3rd party app, we had to quit Teams to make it show up.

 

We have a couple more Microsoft published apps that I'll be allowing in the next couple days, and have lined up some end users to test for me. Hopefully its as easy as waiting the 24 hours, and quitting teams to clear out any cached settings client side.  I'll also set up a test permission policy and add some of our test users into it as an extra check.

 

Cheers

 R

 

Highlighted

@RobD365 

 

Ah yes, it can just be a case of waiting.  Things don't always happen quickly in Teams.  You definitely should not have had to enable it as a third-party app though.

Highlighted
Interesting, I've enabled a couple other Microsoft apps, one of my accounts, which has "Third party apps" set to allow all can see these newly enabled apps straight away, my normal account (and a random selection of users) can't ... i'll give it 24 hours and then see what Microsoft think.
Highlighted
Just an update ... its been a month, and we are still waiting on Microsoft to work out why the apps aren't available, thankfully it's not a high priority for us, but it may become one when the Lists app is released, it doesn't activate :\